KBKenneth Binghaminblog.openziti.io·Mar 23 · 5 min readUsing SPIRE as a Trusted Authority for OpenZiti IdentitiesIntroduction Identity management is central to modern network security. This post shows how to use short‑lived X.509 client certificates from SPIRE — the reference runtime for SPIFFE (Secure Productio00
KBKenneth Binghaminblog.openziti.io·Aug 2, 2024 · 2 min readEasy Steps to Install a Private VPN on Linux with zrokThe great thing about the zrok-share.service is that it comes with the zrok binary and is always on in the background, so it's a good fit for a reliable VPN connection. Let's install the service and configure it to auto-start after a reboot. curl -sS...00
KBKenneth Binghaminblog.openziti.io·Jul 31, 2024 · 4 min readJitsi, meet zrokJitsi Meet is an open-source video conferencing server. I've wanted to run Jitsi behind zrok and someone asked about it today in the forum and we got it working! Here's how I conveniently self-host Jitsi with zrok. Why zrok? zrok.io makes it easy to ...00
KBKenneth Binghaminblog.openziti.io·Jul 23, 2024 · 2 min readExtend Access to a Private S3 Bucket Using PythonA private S3 bucket protects against a data leak by denying all public access. This approach moves access control from the public S3 API to the network layer. We can use OpenZiti's cryptographic identity and attribute-based policies to securely exten...00
KBKenneth Binghaminblog.openziti.io·May 24, 2024 · 3 min readWhy We Verify GitHub CommitsAssigning the author on a commit is an essential feature of Git that allows you to send a commit on behalf of someone while preserving their authorship. I speculate this was the norm when the Linux Kernel authors, who also created Git, still received...00P
